Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/323830343a323130383a3a2f33322d313238203d3e20323634353238.roa
File:                     323830343a323130383a3a2f33322d313238203d3e20323634353238.roa (raw, json)
Hash identifier:          m0oUnqX5khsn5uaJ+m0OGUeUZdJ9Zn6qR2rXTNud4rs=
Subject key identifier:   CB:0B:99:DD:12:A3:D0:73:D2:D3:2A:D6:D4:64:D4:E6:53:CB:25:A3
Certificate issuer:       /CN=2EE7830EC8B817A3DBD80AAF93266292D6118661
Certificate serial:       5F95771D1E604FC261DBD4CB7C98D2F133190C56
Authority key identifier: 2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/323830343a323130383a3a2f33322d313238203d3e20323634353238.roa
Signing time:             Thu 04 Apr 2024 09:29:04 +0000
ROA not before:           Thu 04 Apr 2024 09:24:04 +0000
ROA not after:            Thu 03 Apr 2025 09:29:04 +0000
asID:                     264528
IP address blocks:        2804:2108::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl
                          rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:95:77:1d:1e:60:4f:c2:61:db:d4:cb:7c:98:d2:f1:33:19:0c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE7830EC8B817A3DBD80AAF93266292D6118661
        Validity
            Not Before: Apr  4 09:24:04 2024 GMT
            Not After : Apr  3 09:29:04 2025 GMT
        Subject: CN=CB0B99DD12A3D073D2D32AD6D464D4E653CB25A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:f2:71:4f:ff:eb:f7:84:f5:d2:af:f9:36:
                    51:c9:02:6f:92:0d:01:fe:db:e8:1b:ab:18:07:41:
                    20:4f:93:d2:06:be:9e:8c:a2:07:cd:07:f6:1a:1f:
                    b2:2b:be:67:f6:ee:d2:5e:d3:e6:d8:37:fc:92:bf:
                    ee:60:44:2f:f7:4c:72:dc:b3:4c:76:68:40:2b:8d:
                    15:92:f0:06:c4:7a:f1:0a:ee:27:ca:f1:9a:92:43:
                    e2:a4:58:98:51:4b:be:d2:f1:a8:0a:e7:2a:00:86:
                    ce:b1:b9:d0:06:80:f7:0d:52:d2:57:0a:88:31:76:
                    51:ea:30:cb:0f:33:fb:77:3d:64:3b:3b:e4:06:ea:
                    f9:a3:a0:28:e1:74:64:07:2b:94:3d:09:a0:79:90:
                    53:80:19:f1:c6:73:4e:6c:1b:94:64:42:8a:60:36:
                    26:66:9a:b2:5e:d2:04:2d:d1:aa:4c:fa:4d:c4:84:
                    54:9a:07:43:5c:a3:a3:13:b8:c3:eb:37:75:22:60:
                    21:73:e7:2b:42:8c:cf:04:04:68:e6:d5:11:03:83:
                    94:b9:84:cf:9e:02:da:67:a7:92:2b:8f:bd:fb:89:
                    cd:15:cc:44:09:a1:83:4b:10:52:15:8e:d9:b1:0d:
                    e5:ba:b4:26:8d:96:f4:8e:2a:b3:38:5e:4c:15:ae:
                    cf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0B:99:DD:12:A3:D0:73:D2:D3:2A:D6:D4:64:D4:E6:53:CB:25:A3
            X509v3 Authority Key Identifier:
                keyid:2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/323830343a323130383a3a2f33322d313238203d3e20323634353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2108::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:b0:c0:5c:b4:7f:0c:66:63:83:6e:a3:09:69:cd:3e:a0:8a:
         c0:0f:57:67:c9:be:59:ae:b6:d4:b4:c9:95:b9:1a:dd:b3:ac:
         ca:6a:b0:8b:1f:05:23:5b:0b:b2:56:45:46:c9:89:7d:00:f4:
         10:43:0a:98:ab:0e:c6:01:cf:cd:04:db:5b:c8:df:09:24:0f:
         c1:5f:f1:ca:bf:6c:ca:03:be:8d:17:ae:79:47:60:55:c4:36:
         62:a0:31:d3:f8:24:90:64:e1:0d:e1:b7:8e:b9:97:5d:35:e5:
         40:45:54:b1:61:93:07:2f:51:d5:80:53:97:e4:cf:ff:e1:c3:
         60:51:cc:7e:fe:bc:fd:78:77:c4:2a:ad:26:49:b4:6a:61:60:
         62:e8:83:a1:74:d5:7e:07:c1:db:b6:7b:5a:64:3e:7a:e0:d8:
         d3:f8:d6:a9:0b:fe:15:aa:c1:fa:d8:d3:60:a3:a8:6f:66:da:
         aa:47:c6:21:97:84:da:89:29:a4:1b:70:cd:0c:b6:bb:6f:79:
         2b:17:24:06:16:00:49:24:17:87:b4:4f:22:cd:80:87:26:a0:
         48:05:41:9d:db:c8:23:9e:63:09:48:9f:b0:54:06:d5:2b:41:
         79:3b:a0:ed:74:98:ab:ec:1a:5b:1d:f4:95:18:bf:0a:03:f4:
         a6:ea:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org